General
- Target 2026-07-23_4f520b5bb917d6630728509d94a9fd2d_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 2.8MB
- Sample260723-bpswlsck31
- SHA256 213e6213f3d1f2b4b60e1b807a47025e32f8a48a43f9ed61c66c614e4c57e245
- MD5 4f520b5bb917d6630728509d94a9fd2d
- SHA1 96d3adb7d17bd65bd64398cfe15f3350fcdda151
- SHA512 9bcd91dc3b04f8a2fb28106fb6f3ad2512d8553599ac6f7ef567d7fe405fa29ddda7b3b12a9133827f75f86197268541685c3fbd47d82bbe9f996f4150563c3c
- SSDEEP 49152:sP8K7SleH6mDz+HoBjcfY9/fFTctEhfFcI3Kek3bLgL2vJNtT3wnGe7HvM:YvcI8bLrX3wGe7HE
- TLSH T1F8D58F4692ED01D8E8FAD178C91B861BF7B27C550130D38F02658B5A9FB72325E2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-23_4f520b5bb917d6630728509d94a9fd2d_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_4f520b5bb917d6630728509d94a9fd2d_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_4f520b5bb917d6630728509d94a9fd2d_cobalt-strike_elex_icedid_luca-stealer_njrat_swisyn_vidar
- Size 2.8MB
- SHA256 213e6213f3d1f2b4b60e1b807a47025e32f8a48a43f9ed61c66c614e4c57e245
- MD5 4f520b5bb917d6630728509d94a9fd2d
- SHA1 96d3adb7d17bd65bd64398cfe15f3350fcdda151
- SHA512 9bcd91dc3b04f8a2fb28106fb6f3ad2512d8553599ac6f7ef567d7fe405fa29ddda7b3b12a9133827f75f86197268541685c3fbd47d82bbe9f996f4150563c3c
- SSDEEP 49152:sP8K7SleH6mDz+HoBjcfY9/fFTctEhfFcI3Kek3bLgL2vJNtT3wnGe7HvM:YvcI8bLrX3wGe7HE
- TLSH T1F8D58F4692ED01D8E8FAD178C91B861BF7B27C550130D38F02658B5A9FB72325E2E727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
3